lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <20170119010216.GA8287@yexl-desktop>
Date:   Thu, 19 Jan 2017 09:02:16 +0800
From:   kernel test robot <xiaolong.ye@...el.com>
To:     Sebastian Andrzej Siewior <bigeasy@...utronix.de>
Cc:     "Paul E. McKenney" <paulmck@...ux.vnet.ibm.com>,
        LKML <linux-kernel@...r.kernel.org>, lkp@...org
Subject: [lkp-robot] [rcu]  b332151a29: kernel_BUG_at_mm/slab.c


FYI, we noticed the following commit:

commit: b332151a29cf9e21106681c19fcc98cb01175850 ("rcu: update: Make RCU_EXPEDITE_BOOT be the default")
https://git.kernel.org/pub/scm/linux/kernel/git/paulmck/linux-rcu.git fixes.2017.01.14a

in testcase: trinity
with following parameters:

	runtime: 300s

test-description: Trinity is a linux system call fuzz tester.
test-url: http://codemonkey.org.uk/projects/trinity/


on test machine: qemu-system-i386 -enable-kvm -m 256M

caused below changes:


+-----------------------------------------------------+------------+------------+
|                                                     | d5f6ab9c11 | b332151a29 |
+-----------------------------------------------------+------------+------------+
| boot_successes                                      | 0          | 0          |
| boot_failures                                       | 6          | 8          |
| WARNING:at_include/linux/kref.h:#kobject_get        | 6          | 8          |
| WARNING:at_arch/x86/mm/dump_pagetables.c:#note_page | 2          | 2          |
| kernel_BUG_at_mm/slab.c                             | 0          | 4          |
| invalid_opcode:#[##]PREEMPT_SMP                     | 0          | 4          |
| Kernel_panic-not_syncing:Fatal_exception            | 0          | 6          |
| BUG:unable_to_handle_kernel                         | 0          | 2          |
| Oops                                                | 0          | 2          |
+-----------------------------------------------------+------------+------------+




[    8.044624] sd 0:0:0:0: [sda] Synchronizing SCSI cache
[    8.055721] slab: double free detected in cache 'kmalloc-32', objp 8af558c0
[    8.057138] ------------[ cut here ]------------
[    8.058085] kernel BUG at mm/slab.c:2624!
[    8.059255] invalid opcode: 0000 [#1] PREEMPT SMP
[    8.060246] CPU: 0 PID: 1 Comm: swapper/0 Tainted: G        W       4.10.0-rc3-00003-gb332151 #1
[    8.061994] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.9.3-20161025_171302-gandalf 04/01/2014
[    8.064069] task: 80024040 task.stack: 80026000
[    8.065004] EIP: free_block+0x280/0x290
[    8.065806] EFLAGS: 00210082 CPU: 0
[    8.066516] EAX: 0000003f EBX: 8af56000 ECX: 0000003f EDX: 00000002
[    8.067800] ESI: 00000026 EDI: 8fbd7aa0 EBP: 80027ce8 ESP: 80027ca4
[    8.069173]  DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068
[    8.070301] CR0: 80050033 CR2: 00000000 CR3: 0d7ab000 CR4: 000006b0
[    8.071549] Call Trace:
[    8.072033]  ___cache_free+0x3a3/0x570
[    8.072747]  ? device_release+0x33/0xa0
[    8.073498]  kfree+0x62/0x80
[    8.074054]  kfree_const+0x1d/0x30
[    8.074731]  kobject_release+0x49/0x90
[    8.075453]  kobject_put+0x2d/0x60
[    8.076112]  put_device+0xf/0x20
[    8.076737]  scsi_host_put+0xd/0x10
[    8.077425]  sdebug_driver_remove+0x6e/0xa0
[    8.078227]  ? devices_kset_move_last+0x59/0x90
[    8.079113]  driver_probe_device+0xbb/0x320
[    8.079936]  __device_attach_driver+0x6f/0xb0
[    8.080782]  ? __driver_attach+0xa0/0xa0
[    8.081558]  bus_for_each_drv+0x47/0x80
[    8.082293]  __device_attach+0xb6/0x110
[    8.083028]  ? __driver_attach+0xa0/0xa0
[    8.083789]  device_initial_probe+0xd/0x10
[    8.084584]  bus_probe_device+0x77/0x80
[    8.085303]  device_add+0x3f8/0x5b0
[    8.085975]  ? pm_runtime_init+0xe2/0xf0
[    8.086737]  device_register+0x12/0x20
[    8.087469]  sdebug_add_adapter+0xdb/0x1d0
[    8.088250]  ? driver_register+0x83/0xe0
[    8.089013]  scsi_debug_init+0x597/0x6ed
[    8.089783]  ? printk+0x12/0x14
[    8.090391]  ? osd_uld_init+0x96/0xad
[    8.091101]  ? osd_uld_init+0xad/0xad
[    8.091822]  do_one_initcall+0x8b/0x139
[    8.092572]  ? parse_args+0x25c/0x420
[    8.093273]  kernel_init_freeable+0xf7/0x174
[    8.094083]  ? rest_init+0xb0/0xb0
[    8.094743]  kernel_init+0xb/0x100
[    8.095408]  ? schedule_tail_wrapper+0x9/0xc
[    8.096231]  ret_from_fork+0x19/0x24
[    8.096934] Code: d0 89 45 ec 89 47 08 e9 ce fe ff ff 0f 0b 8b 45 e0 89 44 24 08 8b 45 e8 8b 40 40 c7 04 24 80 68 40 8d 89 44 24 04 e8 fc 39 fc ff <0f> 0b 8d b4 26 00 00 00 00 8d bc 27 00 00 00 00 55 89 e5 83 ec
[    8.100537] EIP: free_block+0x280/0x290 SS:ESP: 0068:80027ca4
[    8.101638] ---[ end trace 02b17e898b7b7a3c ]---
[    8.102538] Kernel panic - not syncing: Fatal exception
[    8.103614] Kernel Offset: 0xb800000 from 0x81000000 (relocation range: 0x80000000-0x907dbfff)




To reproduce:

        git clone git://git.kernel.org/pub/scm/linux/kernel/git/wfg/lkp-tests.git
        cd lkp-tests
        bin/lkp qemu -k <bzImage> job-script  # job-script is attached in this email



Thanks,
Xiaolong

View attachment "config-4.10.0-rc3-00003-gb332151" of type "text/plain" (92817 bytes)

View attachment "job-script" of type "text/plain" (3587 bytes)

Download attachment "dmesg.xz" of type "application/octet-stream" (10636 bytes)

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ